Integrated Security Management Framework

Transcription

1 Integrated Security Management Framework Critical for Securing the Future of IoT Nampuraja Enose Principal Consultant- Industry 4.0 / Industrial Internet 17 Nov 2016

2 Internet Of Things The Vision 2 Instrumented Ability to sense, measure and monitor the condition of almost everything Integrated Informed Intelligent Equipment and Systems seamlessly interconnected to collaborate with each other in entirely new ways Disruptive Technologies Leveraging big and small data to draw real-time visibility to drive innovation and growth Advanced analytics and data-driven diagnostics to optimize processes leading to autonomy Cyber-Physical Systems Interoperable Networks Big Data Processing Real-time Visualization & Advanced Analytics Enabling Platforms MONITOR MANAGE AUTOMATE

3 It is Happening! 3 Past 15 years A B2C Revolution Cisco projects 40 billion intelligent things connected by 2019 ABI Research estimates 35 billion networked devices by 2019 IDC predicts 212 billion devices connectable by 2020 Next 10 years A B2B Revolution Gartner anticipates 19 billion IoT devices by 2019 & 25 billion by 2020 Harbor projects 21.7 billion IoT devices by 2019 Business Insider Intelligence estimates 23.4 billion IoT devices by 2019 Source: Intel Intelligent Systems

4 The Billions of Devices and Trillions in Impact 4 Performance Efficiency Maintenance Efficiency Efficiency Service Efficiency Energy Efficiency 20-25% Equipment Efficiency & Effectiveness 20-40% Increase in Equipment Lifetime 5-10% Saving in Business Expenditure 30-40% Service Margin 25% Reduction in Energy Consumption $3.9 trillion trillion per year in McKinsey Add about $15 trillion to global GDP by GE To grow at CAGR of 7.9% reach $8.9 trillion by IDC Projected Economic Benefits IOE a $19 Trillion opportunity - Cisco Source: McKinsey Global Institute (MGI); Findings from the Infosys FIR Joint Study on Industry 4.0 The state of the Nations

5 securityledger.com Delayed IoT Adoption? Security and Privacy may be the Reason The Security threat is more serious than you think 5 80 Percent of Best-Selling Small Office/Home Office (SOHO) Wireless Routers Have Security Vulnerabilities Ref. SmartFactory, DFKI Control systems, vehicles, homes and even the human body can be accessed and manipulated causing injury or worse CSA (cloud security alliance) Security is definitely one of the biggest barrier for IoT adoption

6 What does it Mean to be on Things? The IT OT Convergence 6 Smart Applications & (smart) Supplier Producer (smart) Customer Advanced Analytics Asynchronous operation SCM Big Data Processing IT- OT Integration ERP MES Cyber meets Seamless Interoperability Synchronous operation Shop-floor Physical Systems Cyber Physical Systems Ressource Flow Flow cyberizing the physical Amplifying physical subsystems with computational abstractions physicalizing the cyber expressing abstractions of software components to represent physical systems Edge Intelligence Semantic Interoperability Source: Infosys & FIR

7 Vertical Convergence What does it Mean to be on Things? The Horizontal and Vertical Convergence Smart Applications & Advanced Analytics Supply chain Level Entrprise Level Producer SCM ERP 7 Big Data Processing Control Level MES IOT Seamless Interoperability Device Level Shop-floor Cyber Physical Systems Sensor Level Horizontal Integration Establishing an end-to-end digital thread of the physical world, across the (manufacturing) value-chain enabled by the advent of cyber-physical systems (CPS) Source: Infosys & FIR

8 What does it Mean to be on Things? The Brown-Field and the Green-Field 8 Smart Applications & (smart) Supplier Producer (smart) Customer Advanced Analytics SCM ERP Big Data Processing MES IT- OT Integration Seamless Interoperability Cyber Physical Systems Brown Field Ressource Flow Shop-floor Green Field Flow The IoT architecture may be built from the ground up to leverage IoT (greenfield) or may be legacy devices that will have IoT capabilities added post-deployment (brownfield) Source: Infosys & FIR

9 Establishing an Integrated Security Management Framework 9 Applications Management IoT Security Application Security ed and Flexible Security Architecture for optimal security IT OT Security Insights Data Provisioning Data Processing Security Data Security Device Security Building Security from the ground up (greenfield) or top down (brownfield) Network Security Data Security Security Application Security Inter- Networks Sensors Network Infrastructure Physical Devices Network Security Device Security The ed Architecture with its Key Security Attributes End point Authorization End point Authentication Device Identity Intrusion Detection Physical Security Device/ Data Integrity Identity Management Autonomous device coordination Interoperability Network Firewalls Transport Security Dynamic traffic shaping Network Segmentation Routing protocol security Wrapper and Proxy Lightweight Cryptography Encrypted storage Signature data Memory Memory Integrity Checks Advanced Encryption Std. Machine data management Data accessibility management Notification PII Security (Privacy) Data Obfuscation Digital Signatures Configuration Data Protection Stored data Encryption Hybrid cloud security Masking Engines Usage policy Enforcement User identity management Application Integrity Malware Protection Anti-virus Sandboxing API Security Recommended Security Controls

10 Establishing an Integrated Security Management Framework 10 IT Security Applications Management IoT Security Application Security ed and Flexible Security Architecture IT OT Security Insights Data Provisioning Data Processing Security Data Security Building Security from the ground up (greenfield) or top down (brownfield) Inter- Networks Sensors Network Infrastructure Physical Devices OT Security Network Security Device Security Physical Security Access Controls Patch Management for industrial control systems Firmware Security OS security OT Security IT Security Data At Rest (DAR) Data In Transit (DIT) Data In Use (DIU) Data Loss Prevention (DLP) Data Integrity Aggregation Policies The ed Architecture with its Key Security Attributes

11 Establishing an Integrated Security Management Framework 11 Add-On Security Applications Management IoT Security Application Security ed and Flexible Security Architecture IT OT Security Insights Data Inter- Networks Sensors Provisioning Data Processing Network Infrastructure Physical Devices In-built Security Security Data Security Network Security Device Security Building Security from the ground up (greenfield) or top down (brownfield) Security in Design Secure Systems Engineering approach Green Field Bottom up In-built Security Add-On Security External Security s Brown Field Top down The ed Architecture with its Key Security Attributes

12 Survivability Reliability Availability Resiliency Assurance Integrated Security Management - Implementation The Key Principles 12 Distributed Decentralized Lightweighted End to End Collaborative Blockchain Edge Intelligence Autonomy Peer to peer Threat Modelling Incident Response Lfe cycle controls / Audit All stakeholders INTEGRATED SECURITY MANAGEMENT Physical Devices Network Infrastructure Data Processing Provisioning Applications Management

13 Thank You 2013 Infosys Limited, Bangalore, India. All Rights Reserved. Infosys believes the information in this document is accurate as of its publication date; such information is subject to change withoutnotice. Infosys acknowledges theproprietary rightsofother companies to thetrademarks, productnames and such other intellectual property rights mentioned in this document. Except asexpresslypermitted, neitherthisdocumentation noranypartofitmaybe reproduced, stored in aretrieval system, ortransmitted in anyformorbyany means, electronic, mechanical, printing, photocopying,recording orotherwise, withouttheprior permission ofinfosyslimitedand/oranynamed intellectualpropertyrightsholdersunderthisdocument.

14 Survivability Reliability Availability Resiliency Assurance Integrated Security Management - Implementation 14 Key Principles Distributed Blockchain Decentralized INTEGRATED SECURITY MANAGEMENT Edge Intelligence Autonomy Light weight Peer to Peer End to End perspective Threat Modelling Physical Devices Network Infrastructure Data Processing Provisioning Applications Management Optimum approach